CVE-2026-67864

open62541 < 1.5.6 - Denial of Service via NodeManagement Type-Instantiation Logic

Title source: llm

Description

An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation logic component

References (4)

Core 4

Core References

https://github.com/open62541/open62541/issues/8133

https://github.com/open62541/open62541/blob/v1.5.5/src/server/ua_services_nodemanagement.c

View Writeup ZIP pw:eip

https://github.com/open62541/open62541/blob/v1.5.5/examples/ci_server.c

View Writeup ZIP pw:eip

https://github.com/open62541/open62541/blob/v1.5.5/plugins/ua_accesscontrol_default.c

View Writeup ZIP pw:eip

Scores

EPSS 0.0025

EPSS Percentile 16.3%

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

Status published

Published Aug 05, 2026

Tracked Since Aug 06, 2026